Android Hit by 0-Click RCE Vulnerability in Core System Component

Google has released an urgent security alert addressing a critical remote code execution vulnerability affecting Android devices worldwide.

The vulnerability, tracked as CVE-2025-48593, exists in Android’s System component and requires no user interaction for exploitation, making it an exceptionally dangerous threat.

The flaw affects Android versions 13 through 16 and demands immediate attention from device manufacturers and users.

Unlike many security threats that require users to click malicious links or download files, this vulnerability operates silently without any user action needed.

An attacker can remotely execute code on a victim’s device simply by targeting them with specialized exploit code.

Critical Risk Without Additional Privileges

What makes this vulnerability particularly severe is that attackers need no elevated access to compromise a device.

The remote code execution can occur from the ground level, allowing threat actors to ...